# Vulnerabilities published in 2025 - [MAL-2025-48797](https://insights.sbomify.com/MAL-2025-48797/): Malicious code in cic8 (npm) (malicious package) - [MAL-2025-48796](https://insights.sbomify.com/MAL-2025-48796/): Malicious code in chibi-store-services (npm) (malicious package) - [MAL-2025-48795](https://insights.sbomify.com/MAL-2025-48795/): Malicious code in bybit-refund (npm) (malicious package) - [MAL-2025-48794](https://insights.sbomify.com/MAL-2025-48794/): Malicious code in analtester (npm) (malicious package) - [MAL-2025-48793](https://insights.sbomify.com/MAL-2025-48793/): Malicious code in advertising-breadcrumb (npm) (malicious package) - [MAL-2025-48792](https://insights.sbomify.com/MAL-2025-48792/): Malicious code in advertising-banners-frontend (npm) (malicious package) - [MAL-2025-48791](https://insights.sbomify.com/MAL-2025-48791/): Malicious code in ads-skeleton (npm) (malicious package) - [MAL-2025-48790](https://insights.sbomify.com/MAL-2025-48790/): Malicious code in ads-dsp-lite-components (npm) (malicious package) - [MAL-2025-4879](https://insights.sbomify.com/MAL-2025-4879/): Malicious code in scikeras (npm) (malicious package) - [MAL-2025-48789](https://insights.sbomify.com/MAL-2025-48789/): Malicious code in add-to-cart-web (npm) (malicious package) - [MAL-2025-48788](https://insights.sbomify.com/MAL-2025-48788/): Malicious code in actor-sockets (npm) (malicious package) - [MAL-2025-48787](https://insights.sbomify.com/MAL-2025-48787/): Malicious code in acme-auth-utils (npm) (malicious package) - [MAL-2025-48786](https://insights.sbomify.com/MAL-2025-48786/): Malicious code in @chatgptclaude_club/claude-code (npm) (malicious package) - [MAL-2025-48785](https://insights.sbomify.com/MAL-2025-48785/): Malicious code in web-vitals-helpers (npm) (malicious package) - [MAL-2025-48784](https://insights.sbomify.com/MAL-2025-48784/): Malicious code in vite-plugin-parsify (npm) (malicious package) - [MAL-2025-48783](https://insights.sbomify.com/MAL-2025-48783/): Malicious code in dataflow-unified (npm) (malicious package) - [MAL-2025-48782](https://insights.sbomify.com/MAL-2025-48782/): Malicious code in bad-santa-claude (npm) (malicious package) - [MAL-2025-48781](https://insights.sbomify.com/MAL-2025-48781/): Malicious code in unused-imports (npm) (malicious package) - [MAL-2025-48780](https://insights.sbomify.com/MAL-2025-48780/): Malicious code in tailwind-utils-plus (npm) (malicious package) - [MAL-2025-4878](https://insights.sbomify.com/MAL-2025-4878/): Malicious code in sails-mongo-ng (npm) (malicious package) - [MAL-2025-48779](https://insights.sbomify.com/MAL-2025-48779/): Malicious code in tailwind-config-view (npm) (malicious package) - [MAL-2025-48778](https://insights.sbomify.com/MAL-2025-48778/): Malicious code in tailwind-chart (npm) (malicious package) - [MAL-2025-48777](https://insights.sbomify.com/MAL-2025-48777/): Malicious code in polyfill-corejs3 (npm) (malicious package) - [MAL-2025-48776](https://insights.sbomify.com/MAL-2025-48776/): Malicious code in op-cli-installer (npm) (malicious package) - [MAL-2025-48775](https://insights.sbomify.com/MAL-2025-48775/): Malicious code in eslint-comments (npm) (malicious package) - [MAL-2025-48774](https://insights.sbomify.com/MAL-2025-48774/): Malicious code in badgekit-api-client (npm) (malicious package) - [MAL-2025-48773](https://insights.sbomify.com/MAL-2025-48773/): Malicious code in add-module-exports (npm) (malicious package) - [MAL-2025-48772](https://insights.sbomify.com/MAL-2025-48772/): Malicious code in wpe-php-compat1mm (npm) (malicious package) - [MAL-2025-48771](https://insights.sbomify.com/MAL-2025-48771/): Malicious code in web-billing-code-snippets (npm) (malicious package) - [MAL-2025-48770](https://insights.sbomify.com/MAL-2025-48770/): Malicious code in vulnerability-test (npm) (malicious package) - [MAL-2025-4877](https://insights.sbomify.com/MAL-2025-4877/): Malicious code in rpc-bot-v13 (npm) (malicious package) - [MAL-2025-48769](https://insights.sbomify.com/MAL-2025-48769/): Malicious code in vue-sfc-require-hook (npm) (malicious package) - [MAL-2025-48768](https://insights.sbomify.com/MAL-2025-48768/): Malicious code in vectorize-perf-alt (npm) (malicious package) - [MAL-2025-48767](https://insights.sbomify.com/MAL-2025-48767/): Malicious code in ui-2 (npm) (malicious package) - [MAL-2025-48766](https://insights.sbomify.com/MAL-2025-48766/): Malicious code in twilio-live-interactive-audio (npm) (malicious package) - [MAL-2025-48765](https://insights.sbomify.com/MAL-2025-48765/): Malicious code in tps-lookup (npm) (malicious package) - [MAL-2025-48764](https://insights.sbomify.com/MAL-2025-48764/): Malicious code in test-all2 (npm) (malicious package) - [MAL-2025-48763](https://insights.sbomify.com/MAL-2025-48763/): Malicious code in starlight-for-rabbitmq-docs (npm) (malicious package) - [MAL-2025-48762](https://insights.sbomify.com/MAL-2025-48762/): Malicious code in shutterstock-cli (npm) (malicious package) - [MAL-2025-48761](https://insights.sbomify.com/MAL-2025-48761/): Malicious code in shiprocket-mcp (npm) (malicious package) - [MAL-2025-48760](https://insights.sbomify.com/MAL-2025-48760/): Malicious code in shiprocket-invoice-export (npm) (malicious package) - [MAL-2025-4876](https://insights.sbomify.com/MAL-2025-4876/): Malicious code in rpc-bot (npm) (malicious package) - [MAL-2025-48759](https://insights.sbomify.com/MAL-2025-48759/): Malicious code in sample-game-server (npm) (malicious package) - [MAL-2025-48758](https://insights.sbomify.com/MAL-2025-48758/): Malicious code in response-uppercase (npm) (malicious package) - [MAL-2025-48757](https://insights.sbomify.com/MAL-2025-48757/): Malicious code in replit-desktop-release-server (npm) (malicious package) - [MAL-2025-48756](https://insights.sbomify.com/MAL-2025-48756/): Malicious code in react-ts-tradingview-widgets-docs (npm) (malicious package) - [MAL-2025-48755](https://insights.sbomify.com/MAL-2025-48755/): Malicious code in ragstack-ai (npm) (malicious package) - [MAL-2025-48754](https://insights.sbomify.com/MAL-2025-48754/): Malicious code in purchases-roku (npm) (malicious package) - [MAL-2025-48753](https://insights.sbomify.com/MAL-2025-48753/): Malicious code in puppeteer-jest (npm) (malicious package) - [MAL-2025-48752](https://insights.sbomify.com/MAL-2025-48752/): Malicious code in peloton-creative-assets (npm) (malicious package) - [MAL-2025-48751](https://insights.sbomify.com/MAL-2025-48751/): Malicious code in paysera-loading-spinner (npm) (malicious package) - [MAL-2025-48750](https://insights.sbomify.com/MAL-2025-48750/): Malicious code in paysafe-client-proxy (npm) (malicious package) - [MAL-2025-4875](https://insights.sbomify.com/MAL-2025-4875/): Malicious code in rlang (npm) (malicious package) - [MAL-2025-48749](https://insights.sbomify.com/MAL-2025-48749/): Malicious code in ofjaaaah-helper-utils (npm) (malicious package) - [MAL-2025-48748](https://insights.sbomify.com/MAL-2025-48748/): Malicious code in o3-storybook (npm) (malicious package) - [MAL-2025-48747](https://insights.sbomify.com/MAL-2025-48747/): Malicious code in o-pgdump (npm) (malicious package) - [MAL-2025-48746](https://insights.sbomify.com/MAL-2025-48746/): Malicious code in npm-cli-00 (npm) (malicious package) - [MAL-2025-48745](https://insights.sbomify.com/MAL-2025-48745/): Malicious code in node-sdk-input-validation (npm) (malicious package) - [MAL-2025-48744](https://insights.sbomify.com/MAL-2025-48744/): Malicious code in node-js-playwright-browserstack (npm) (malicious package) - [MAL-2025-48743](https://insights.sbomify.com/MAL-2025-48743/): Malicious code in native-integration (npm) (malicious package) - [MAL-2025-48742](https://insights.sbomify.com/MAL-2025-48742/): Malicious code in naftis (npm) (malicious package) - [MAL-2025-48741](https://insights.sbomify.com/MAL-2025-48741/): Malicious code in minter-typescript (npm) (malicious package) - [MAL-2025-48740](https://insights.sbomify.com/MAL-2025-48740/): Malicious code in m0chan-does-notexist (npm) (malicious package) - [MAL-2025-4874](https://insights.sbomify.com/MAL-2025-4874/): Malicious code in react-query-persist (npm) (malicious package) - [MAL-2025-48739](https://insights.sbomify.com/MAL-2025-48739/): Malicious code in logger-mo13kf (npm) (malicious package) - [MAL-2025-48738](https://insights.sbomify.com/MAL-2025-48738/): Malicious code in local_shopping_cart (npm) (malicious package) - [MAL-2025-48737](https://insights.sbomify.com/MAL-2025-48737/): Malicious code in local_edwiserform (npm) (malicious package) - [MAL-2025-48736](https://insights.sbomify.com/MAL-2025-48736/): Malicious code in lightspark-crypto (npm) (malicious package) - [MAL-2025-48735](https://insights.sbomify.com/MAL-2025-48735/): Malicious code in legacy_esg_odf_common (npm) (malicious package) - [MAL-2025-48734](https://insights.sbomify.com/MAL-2025-48734/): Malicious code in ldhpgemrdhs95006 (npm) (malicious package) - [MAL-2025-48733](https://insights.sbomify.com/MAL-2025-48733/): Malicious code in ldhpgemrdhs95005 (npm) (malicious package) - [MAL-2025-48732](https://insights.sbomify.com/MAL-2025-48732/): Malicious code in ldhpgemrdhs94010 (npm) (malicious package) - [MAL-2025-48731](https://insights.sbomify.com/MAL-2025-48731/): Malicious code in ldhpgemrdhs94006 (npm) (malicious package) - [MAL-2025-48730](https://insights.sbomify.com/MAL-2025-48730/): Malicious code in ldhpgemrdhs92092 (npm) (malicious package) - [MAL-2025-4873](https://insights.sbomify.com/MAL-2025-4873/): Malicious code in react-native-atob (npm) (malicious package) - [MAL-2025-48729](https://insights.sbomify.com/MAL-2025-48729/): Malicious code in ldhpgemrdhs92011 (npm) (malicious package) - [MAL-2025-48728](https://insights.sbomify.com/MAL-2025-48728/): Malicious code in ldhpgemrdhs92010 (npm) (malicious package) - [MAL-2025-48727](https://insights.sbomify.com/MAL-2025-48727/): Malicious code in ldhpgemrdhs92009 (npm) (malicious package) - [MAL-2025-48726](https://insights.sbomify.com/MAL-2025-48726/): Malicious code in ldhpgemrdhs92007 (npm) (malicious package) - [MAL-2025-48725](https://insights.sbomify.com/MAL-2025-48725/): Malicious code in ldhpgemrdhs92006 (npm) (malicious package) - [MAL-2025-48724](https://insights.sbomify.com/MAL-2025-48724/): Malicious code in ldhpgemrdhs92004 (npm) (malicious package) - [MAL-2025-48723](https://insights.sbomify.com/MAL-2025-48723/): Malicious code in ldhpgemrdhs84006 (npm) (malicious package) - [MAL-2025-48722](https://insights.sbomify.com/MAL-2025-48722/): Malicious code in ldhpgemrdhs83600 (npm) (malicious package) - [MAL-2025-48721](https://insights.sbomify.com/MAL-2025-48721/): Malicious code in ldhpgemrdhs79029 (npm) (malicious package) - [MAL-2025-48720](https://insights.sbomify.com/MAL-2025-48720/): Malicious code in ldhpgemrdhs60214 (npm) (malicious package) - [MAL-2025-4872](https://insights.sbomify.com/MAL-2025-4872/): Malicious code in react-logs (npm) (malicious package) - [MAL-2025-48719](https://insights.sbomify.com/MAL-2025-48719/): Malicious code in ldhpgemrdhs60152 (npm) (malicious package) - [MAL-2025-48718](https://insights.sbomify.com/MAL-2025-48718/): Malicious code in ldhpgemrdhs60015 (npm) (malicious package) - [MAL-2025-48717](https://insights.sbomify.com/MAL-2025-48717/): Malicious code in ldhpgemrdhs51214 (npm) (malicious package) - [MAL-2025-48716](https://insights.sbomify.com/MAL-2025-48716/): Malicious code in ldhemrdhs95006 (npm) (malicious package) - [MAL-2025-48715](https://insights.sbomify.com/MAL-2025-48715/): Malicious code in ldhemrdhs95005 (npm) (malicious package) - [MAL-2025-48714](https://insights.sbomify.com/MAL-2025-48714/): Malicious code in ldhemrdhs94010 (npm) (malicious package) - [MAL-2025-48713](https://insights.sbomify.com/MAL-2025-48713/): Malicious code in ldhemrdhs94006 (npm) (malicious package) - [MAL-2025-48712](https://insights.sbomify.com/MAL-2025-48712/): Malicious code in ldhemrdhs92092 (npm) (malicious package) - [MAL-2025-48711](https://insights.sbomify.com/MAL-2025-48711/): Malicious code in ldhemrdhs92011 (npm) (malicious package) - [MAL-2025-48710](https://insights.sbomify.com/MAL-2025-48710/): Malicious code in ldhemrdhs92010 (npm) (malicious package) - [MAL-2025-4871](https://insights.sbomify.com/MAL-2025-4871/): Malicious code in react-intlist (npm) (malicious package) - [MAL-2025-48709](https://insights.sbomify.com/MAL-2025-48709/): Malicious code in ldhemrdhs92009 (npm) (malicious package) - [MAL-2025-48708](https://insights.sbomify.com/MAL-2025-48708/): Malicious code in ldhemrdhs92007 (npm) (malicious package) - [MAL-2025-48707](https://insights.sbomify.com/MAL-2025-48707/): Malicious code in ldhemrdhs92006 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/572/